@latchway/react-native 0.0.0-bootstrap.0 → 1.0.0

package/lib/types.d.ts

@@ -0,0 +1,200 @@
+import type { LatchwayError } from "@latchway/client";
+export type ReactNativePlatform = "react_native_ios" | "react_native_android";
+export interface IdentityTokenProvider {
+    getIdentityToken(): Promise<string>;
+}
+export type GetIdentityToken = () => Promise<string>;
+export type AppleSoftwareKeyFallbackPolicy = "disallow" | "allow";
+export type AndroidKeyPolicy = "hardware_backed_required" | "strongbox_preferred" | "software_allowed";
+export interface AppleSecurityOptions {
+    /** Fully resolved private app-ID Keychain group; required on iOS and first in the signed root app. */
+    rootKeychainAccessGroup: string;
+    /** Every explicit extension-shared group, scanned at exact root coordinates but never mutated. */
+    legacySharedKeychainAccessGroups?: readonly string[];
+    /** App Attest is enabled by default. Disabling it fails closed unless the server accepts another provider. */
+    appAttestEnabled?: boolean;
+    /** A non-secret namespace for caller-managed App Attest accepted-key state. */
+    storageNamespace?: string;
+    softwareKeyFallbackPolicy?: AppleSoftwareKeyFallbackPolicy;
+}
+export interface AndroidSecurityOptions {
+    /** Google Cloud project number used by Play Integrity standard requests. */
+    playIntegrityCloudProjectNumber?: string;
+    keyPolicy?: AndroidKeyPolicy;
+}
+export type LatchwayFetch = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
+/** @deprecated Use `LatchwayFetch`; JavaScript fetch injection is no longer a client option. */
+export type FetchImplementation = LatchwayFetch;
+export interface LatchwayOptions {
+    baseURL: string;
+    applicationID: string;
+    environment: string;
+    /** Supplied transiently to native operations; native consumes it only when session work needs identity. */
+    getIdentityToken?: GetIdentityToken;
+    identityTokenProvider?: IdentityTokenProvider;
+    identityProvider?: string;
+    appVersion?: string;
+    apple?: AppleSecurityOptions;
+    android?: AndroidSecurityOptions;
+    /** Limited to loopback HTTP origins for local conformance. */
+    allowInsecureLoopback?: boolean;
+}
+export interface LatchwayFetchInit extends RequestInit {
+    latchwayFeature?: string;
+}
+export interface QuotaLimit {
+    metric: string;
+    maximum?: number;
+    used?: number;
+    reserved?: number;
+    remaining?: number;
+    resets_at?: string;
+    hard: boolean;
+}
+export interface QuotaSnapshot {
+    feature: string;
+    observed_at: string;
+    limits: QuotaLimit[];
+}
+export interface ReactNativeDiagnostics {
+    sdkVersion: string;
+    nativeSDKVersion: string;
+    contractVersion: "1.0.0";
+    protocolVersion: 2;
+    platform: ReactNativePlatform;
+    keyStorage: string;
+    attestation: {
+        support: "supported" | "unsupported" | "unknown";
+        /** Provider bound to the currently accepted native session grant. */
+        provider?: string;
+        /** Trust level bound to the currently accepted native session grant. */
+        trustLevel?: string;
+        lastOperation?: string;
+    };
+    session: {
+        state: "absent" | "establishing" | "active" | "refreshing" | "expired" | "revoked" | "failed";
+        expiresAt?: string;
+        refreshAvailable?: boolean;
+    };
+    installation: {
+        id?: string;
+        status?: string;
+    };
+    server: {
+        version?: string;
+        lastRequestID?: string;
+    };
+    lastErrorCode?: string;
+}
+/** Native iOS execution boundaries that can hold delegated component sessions. */
+export type ReactNativeIOSComponentKind = "widget" | "share_extension" | "app_intent_extension" | "notification_service_extension" | "action_extension" | "sso_extension";
+/**
+ * Public, non-secret descriptor used by the containing application to prepare
+ * and retire one independently keyed native iOS component.
+ */
+export interface ReactNativeIOSComponent {
+    definitionID: string;
+    kind: ReactNativeIOSComponentKind;
+    keychainAccessGroup: string;
+    requestedFeatures: readonly string[];
+}
+/** iOS component kinds retained for delegated-session protocol compatibility. */
+export type ReactNativeDirectAttestationComponentKind = "action_extension" | "sso_extension";
+/**
+ * Public, non-secret descriptor for one independently keyed iOS component.
+ *
+ * `keychainAccessGroup` must be the fully resolved access group present in the
+ * signed entitlements of both the containing application and the component.
+ */
+export interface ReactNativeDirectAttestationComponent {
+    definitionID: string;
+    kind: ReactNativeDirectAttestationComponentKind;
+    keychainAccessGroup: string;
+    requestedFeatures: readonly string[];
+}
+export interface ReactNativeComponentAppleOptions {
+    /** The containing application's fully resolved private root Keychain group. */
+    rootKeychainAccessGroup: string;
+    /** Shared groups scanned for legacy root state; must include this component's exact group. */
+    legacySharedKeychainAccessGroups: readonly string[];
+    /** A non-secret namespace retained for component state compatibility. */
+    storageNamespace?: string;
+    softwareKeyFallbackPolicy?: AppleSoftwareKeyFallbackPolicy;
+}
+/** Configuration for JavaScript executing inside the signed iOS extension bundle. */
+export interface LatchwayComponentOptions {
+    baseURL: string;
+    applicationID: string;
+    environment: string;
+    component: ReactNativeDirectAttestationComponent;
+    appVersion?: string;
+    apple: ReactNativeComponentAppleOptions;
+    /** Limited to loopback HTTP origins for local conformance. */
+    allowInsecureLoopback?: boolean;
+}
+export type ReactNativeComponentTrustSource = "direct_attested" | "delegated_from_attested_root" | "delegated_identity_only" | "delegated_direct_attested" | "identity_only" | "web_risk_verified" | "debug";
+/** Redacted native state for one independently keyed component. */
+export interface ReactNativeComponentDiagnostics {
+    familyID?: string;
+    componentID?: string;
+    definitionID: string;
+    keychainAccessGroup: string;
+    keyAvailable: boolean;
+    keyStorage: string;
+    grantAvailable: boolean;
+    sessionAvailable: boolean;
+    trustSource?: ReactNativeComponentTrustSource;
+    trustExpiresAt?: string;
+    containingAppActionRequired: boolean;
+}
+/**
+ * A component-scoped client for React Native JavaScript executing inside an
+ * iOS extension process. It has no root identity or containing-app API.
+ */
+export interface LatchwayComponentClient {
+    readonly ready: Promise<void>;
+    /**
+     * Retained for API compatibility. iOS application extensions cannot call
+     * the platform App Attest key-generation API, so this fails closed with
+     * `attestation_unsupported`; use independently keyed delegated sessions.
+     */
+    establishDirectAttestation(): Promise<void>;
+    diagnostics(): Promise<ReactNativeComponentDiagnostics>;
+    dispose(): Promise<void>;
+}
+export interface LatchwayClient {
+    /** Canonical gateway origin for framework clients that require an explicit base URL. */
+    readonly gatewayURL: string;
+    /** Resolves after the native runtime proves contract compatibility. */
+    readonly ready: Promise<void>;
+    fetch(input: RequestInfo | URL, init?: LatchwayFetchInit): Promise<Response>;
+    /** Returns a WHATWG fetch-shaped function permanently bound to one Latchway feature. */
+    fetchFor(feature: string): LatchwayFetch;
+    quota(feature: string): Promise<QuotaSnapshot>;
+    diagnostics(): Promise<ReactNativeDiagnostics>;
+    /** Explicitly rotates the native session credentials for this installation. */
+    refresh(): Promise<void>;
+    /**
+     * Creates or restores independent native iOS component keys and delegated
+     * provisioning grants. Descriptor fields are public; credentials remain native.
+     */
+    prepareComponents(components: readonly ReactNativeIOSComponent[]): Promise<ReactNativeComponentDiagnostics[]>;
+    /** Replaces one component key and its delegated provisioning grant. */
+    replaceComponent(component: ReactNativeIOSComponent): Promise<ReactNativeComponentDiagnostics>;
+    /** Reads redacted local state for one descriptor without using root identity. */
+    componentDiagnostics(component: ReactNativeIOSComponent): Promise<ReactNativeComponentDiagnostics>;
+    /** Revokes and erases one native iOS component without affecting its siblings. */
+    revokeComponent(component: ReactNativeIOSComponent): Promise<void>;
+    /** Revokes this installation while leaving independently provisioned family components addressable. */
+    revokeCurrentInstallation(): Promise<void>;
+    /**
+     * Revokes the complete Installation Family and retires the root plus every
+     * native-registered component, including registrations from earlier app
+     * launches. `retiring` remains available for pre-registry legacy state.
+     */
+    revokeCurrentInstallationFamily(retiring?: readonly ReactNativeIOSComponent[]): Promise<void>;
+    /** Releases this JavaScript instance. Secure installation state remains until revocation. */
+    dispose(): Promise<void>;
+}
+export type { LatchwayError };
+//# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG,sBAAsB,CAAC;AAE9E,MAAM,WAAW,qBAAqB;IACpC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACrC;AAED,MAAM,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAErD,MAAM,MAAM,8BAA8B,GAAG,UAAU,GAAG,OAAO,CAAC;AAElE,MAAM,MAAM,gBAAgB,GACxB,0BAA0B,GAC1B,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB,MAAM,WAAW,oBAAoB;IACnC,sGAAsG;IACtG,uBAAuB,EAAE,MAAM,CAAC;IAChC,kGAAkG;IAClG,gCAAgC,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrD,8GAA8G;IAC9G,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB,CAAC,EAAE,8BAA8B,CAAC;CAC5D;AAED,MAAM,WAAW,sBAAsB;IACrC,4EAA4E;IAC5E,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,SAAS,CAAC,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAChG,gGAAgG;AAChG,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAEhD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,oBAAoB,CAAC;IAC7B,OAAO,CAAC,EAAE,sBAAsB,CAAC;IACjC,8DAA8D;IAC9D,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,iBAAkB,SAAQ,WAAW;IACpD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,UAAU,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,CAAC,CAAC;IACnB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE;QACX,OAAO,EAAE,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;QACjD,qEAAqE;QACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,wEAAwE;QACxE,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,OAAO,EAAE;QACP,KAAK,EAAE,QAAQ,GAAG,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;QAC9F,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,YAAY,EAAE;QACZ,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,MAAM,EAAE;QACN,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;IACF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,kFAAkF;AAClF,MAAM,MAAM,2BAA2B,GACnC,QAAQ,GACR,iBAAiB,GACjB,sBAAsB,GACtB,gCAAgC,GAChC,kBAAkB,GAClB,eAAe,CAAC;AAEpB;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,2BAA2B,CAAC;IAClC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,iFAAiF;AACjF,MAAM,MAAM,yCAAyC,GACjD,kBAAkB,GAClB,eAAe,CAAC;AAEpB;;;;;GAKG;AACH,MAAM,WAAW,qCAAqC;IACpD,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,yCAAyC,CAAC;IAChD,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,gCAAgC;IAC/C,+EAA+E;IAC/E,uBAAuB,EAAE,MAAM,CAAC;IAChC,8FAA8F;IAC9F,gCAAgC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,yEAAyE;IACzE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB,CAAC,EAAE,8BAA8B,CAAC;CAC5D;AAED,qFAAqF;AACrF,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,qCAAqC,CAAC;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,gCAAgC,CAAC;IACxC,8DAA8D;IAC9D,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,MAAM,+BAA+B,GACvC,iBAAiB,GACjB,8BAA8B,GAC9B,yBAAyB,GACzB,2BAA2B,GAC3B,eAAe,GACf,mBAAmB,GACnB,OAAO,CAAC;AAEZ,mEAAmE;AACnE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,OAAO,CAAC;IACxB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,WAAW,CAAC,EAAE,+BAA+B,CAAC;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2BAA2B,EAAE,OAAO,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B;;;;OAIG;IACH,0BAA0B,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,WAAW,IAAI,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACxD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7E,wFAAwF;IACxF,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAAC;IACzC,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/C,WAAW,IAAI,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC/C,+EAA+E;IAC/E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB;;;OAGG;IACH,iBAAiB,CAAC,UAAU,EAAE,SAAS,uBAAuB,EAAE,GAAG,OAAO,CAAC,+BAA+B,EAAE,CAAC,CAAC;IAC9G,uEAAuE;IACvE,gBAAgB,CAAC,SAAS,EAAE,uBAAuB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC/F,iFAAiF;IACjF,oBAAoB,CAAC,SAAS,EAAE,uBAAuB,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IACnG,kFAAkF;IAClF,eAAe,CAAC,SAAS,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,uGAAuG;IACvG,yBAAyB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C;;;;OAIG;IACH,+BAA+B,CAAC,QAAQ,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9F,6FAA6F;IAC7F,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1B;AAED,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/lib/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/lib/version.d.ts

@@ -0,0 +1,8 @@
+export declare const SDK_VERSION = "1.0.0";
+export declare const CONTRACT_VERSION = "1.0.0";
+export declare const PROTOCOL_VERSION = 2;
+export declare const SUPPORTED_PROTOCOL_VERSIONS: readonly [1, 2];
+export declare const SDK_KIND = "react-native";
+export declare const REACT_NATIVE_FRAMEWORK_ID = "react-native-fetch";
+export declare const REACT_NATIVE_FRAMEWORK_VERSION = "0.82.0";
+//# sourceMappingURL=version.d.ts.map

package/lib/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,UAAU,CAAC;AACnC,eAAO,MAAM,gBAAgB,UAAU,CAAC;AACxC,eAAO,MAAM,gBAAgB,IAAI,CAAC;AAClC,eAAO,MAAM,2BAA2B,iBAAgD,CAAC;AACzF,eAAO,MAAM,QAAQ,iBAAiB,CAAC;AACvC,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAC9D,eAAO,MAAM,8BAA8B,WAAW,CAAC"}

package/lib/version.js

@@ -0,0 +1,8 @@
+export const SDK_VERSION = "1.0.0";
+export const CONTRACT_VERSION = "1.0.0";
+export const PROTOCOL_VERSION = 2;
+export const SUPPORTED_PROTOCOL_VERSIONS = Object.freeze([1, PROTOCOL_VERSION]);
+export const SDK_KIND = "react-native";
+export const REACT_NATIVE_FRAMEWORK_ID = "react-native-fetch";
+export const REACT_NATIVE_FRAMEWORK_VERSION = "0.82.0";
+//# sourceMappingURL=version.js.map

package/lib/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AACnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,OAAO,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAClC,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,gBAAgB,CAAU,CAAC,CAAC;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC;AACvC,MAAM,CAAC,MAAM,yBAAyB,GAAG,oBAAoB,CAAC;AAC9D,MAAM,CAAC,MAAM,8BAA8B,GAAG,QAAQ,CAAC"}

package/package.json

@@ -1,19 +1,143 @@
 {
   "name": "@latchway/react-native",
-  "version": "0.0.0-bootstrap.0",
-  "description": "Reserved namespace bootstrap for the Latchway React Native client.",
+  "version": "1.0.0",
+  "description": "Hardware-backed React Native client for the Latchway AI gateway",
   "license": "Apache-2.0",
+  "type": "module",
+  "main": "./lib/index.js",
+  "module": "./lib/index.js",
+  "types": "./lib/index.d.ts",
+  "react-native": "./src/index.ts",
+  "sideEffects": false,
+  "engines": {
+    "node": ">=24.19.0",
+    "pnpm": "10.15.0"
+  },
   "files": [
+    "android/src",
+    "android/build.gradle.kts",
+    "android/consumer-rules.pro",
+    "android/gradle.properties",
+    "android/gradle/wrapper/gradle-wrapper.jar",
+    "android/gradle/wrapper/gradle-wrapper.properties",
+    "android/gradlew",
+    "android/gradlew.bat",
+    "android/settings.gradle.kts",
+    "docs",
+    "ios",
+    "lib",
+    "src",
+    "CHANGELOG.md",
     "LICENSE",
-    "README.md"
+    "NOTICE",
+    "README.md",
+    "SECURITY.md",
+    "LatchwayReactNative.podspec",
+    "contract.lock",
+    "release-compatibility.json",
+    "react-native.config.cjs"
   ],
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "react-native": "./src/index.ts",
+      "import": "./lib/index.js",
+      "default": "./lib/index.js"
+    },
+    "./testing": {
+      "types": "./lib/testing.d.ts",
+      "import": "./lib/testing.js",
+      "default": "./lib/testing.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "dependencies": {
+    "@latchway/client": "1.0.0",
+    "web-streams-polyfill": "4.3.0"
+  },
+  "peerDependencies": {
+    "react": "19.1.x",
+    "react-native": "0.82.x"
+  },
+  "devDependencies": {
+    "@ai-sdk/anthropic": "4.0.46",
+    "@ai-sdk/openai": "4.0.52",
+    "@eslint/js": "10.0.1",
+    "@langchain/core": "1.2.9",
+    "@langchain/openai": "1.5.10",
+    "@react-native/codegen": "0.82.0",
+    "@react-native/gradle-plugin": "0.82.0",
+    "@types/node": "24.13.3",
+    "@types/react": "19.2.18",
+    "ai": "7.0.85",
+    "eslint": "10.9.1",
+    "globals": "17.11.0",
+    "openai": "7.8.0",
+    "react": "19.1.1",
+    "react-native": "0.82.0",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.68.0",
+    "vitest": "4.1.11",
+    "zod": "4.5.4"
+  },
+  "codegenConfig": {
+    "name": "LatchwayReactNativeSpec",
+    "type": "modules",
+    "jsSrcsDir": "src/native",
+    "android": {
+      "javaPackageName": "dev.latchway.reactnative"
+    },
+    "ios": {
+      "modules": {
+        "NativeLatchway": {
+          "className": "RCTNativeLatchway",
+          "unstableRequiresMainQueueSetup": false
+        }
+      }
+    }
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Latchway/latchway-react-native-sdk.git"
   },
+  "bugs": {
+    "url": "https://github.com/Latchway/latchway-react-native-sdk/issues"
+  },
+  "homepage": "https://github.com/Latchway/latchway-react-native-sdk#readme",
   "publishConfig": {
     "access": "public",
-    "registry": "https://registry.npmjs.org/",
-    "tag": "bootstrap"
+    "provenance": true,
+    "registry": "https://registry.npmjs.org/"
+  },
+  "keywords": [
+    "attestation",
+    "dpop",
+    "react-native",
+    "turbomodule"
+  ],
+  "scripts": {
+    "build": "node scripts/clean.mjs && tsc -p tsconfig.build.json",
+    "check": "pnpm verify:contracts && pnpm verify:compatibility && pnpm lint && pnpm typecheck && pnpm test && pnpm codegen:check && pnpm build && pnpm example:check && pnpm example:bundle:check && pnpm native:boundary",
+    "codegen:check": "node scripts/verify-codegen.mjs",
+    "docs:bundle": "python3 scripts/build_docs_bundle.py",
+    "example:check": "tsc -p tsconfig.example.json --noEmit",
+    "example:bundle:check": "node scripts/verify-example-bundles.mjs",
+    "lint": "eslint . --max-warnings=0",
+    "ios:spec": "pod ipc spec LatchwayReactNative.podspec >/dev/null",
+    "native:android:conformance": "android/gradlew -p android testDebugUnitTest --tests '*NativeLatchwayModuleTest*' --no-daemon",
+    "native:boundary": "node scripts/verify-native-boundary.mjs",
+    "native:ios:conformance": "swift test --filter LatchwayNativeBridgeConformanceTests",
+    "pack:check": "node scripts/verify-pack.mjs",
+    "release:preflight": "node scripts/release-preflight.mjs",
+    "release:publish": "node scripts/publish-or-verify.mjs",
+    "security:dependencies": "bash scripts/scan-dependencies.sh \"$(git rev-parse HEAD)\"",
+    "consumer:check": "node scripts/verify-consumer.mjs",
+    "test": "vitest run && node --test scripts/test-npm-release-evidence.mjs scripts/test-android-release-evidence.mjs scripts/test-ci-lock-output.mjs scripts/test-package-archive.mjs && python3 -m unittest scripts/test_build_docs_bundle.py scripts/test_maintainer_release.py scripts/test_public_core_release.py && python3 scripts/test-dependency-vulnerability-scan.py",
+    "test:watch": "vitest",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "verify:bundle": "node scripts/verify-contract-bundle.mjs",
+    "verify:compatibility": "node scripts/verify-compatibility.mjs",
+    "verify:contracts": "node scripts/verify-contract.mjs",
+    "verify:reproducible": "node scripts/verify-reproducible.mjs"
   }
-}
+}

package/react-native.config.cjs

@@ -0,0 +1,7 @@
+module.exports = {
+  dependency: {
+    platforms: {
+      android: { sourceDir: "./android" },
+    },
+  },
+};

package/release-compatibility.json

@@ -0,0 +1,64 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "schema_version": 1,
+  "contract": {
+    "version": "1.0.0",
+    "wire_protocol": 2,
+    "repository": "https://github.com/Latchway/latchway.git",
+    "core_commit": "d260e3d7485e9e1487b5e03922b79c7089d94ce2",
+    "bundle_sha256": "4866aec1ff70e78d70f07847448161c2b59970fe102d95393b051444536d29a4",
+    "fixtures": {
+      "attestation-binding-v1.json": "aaadef1172dffc3e600029e03259ff636a969cd4f925544fdccfb2c704b03659",
+      "component-attestation-binding-v2.json": "8411308998cdffccf286892b94a6c759cbcf63b92e4727144d3a755dcd7c13d4",
+      "dpop-v1.json": "b639e22dcd1c1a18e1292a044d96ec043c3be1e0271aacd6904bca39253bc5d4",
+      "installation-family-v2.json": "7ea657c5ca1de6d0ab1507b6187a1a6920fcf7486a6c6da178727df0efc5257d",
+      "protocol-version.json": "4a6cf9f271bc9e83648eacf05f250f8fab24fc215d292a5a721148578f7372b1"
+    }
+  },
+  "react_native": {
+    "package": "@latchway/react-native",
+    "version": "1.0.0",
+    "baseline": "0.82.0",
+    "cli": "20.0.0",
+    "react": "19.1.1",
+    "react_peer": "19.1.x",
+    "new_architecture": true,
+    "node_linker": "hoisted",
+    "firebase": {
+      "react_native": "25.1.0",
+      "apple_sdk": "12.15.0",
+      "android_bom": "34.15.0"
+    }
+  },
+  "javascript": {
+    "package": "@latchway/client",
+    "version": "1.0.0",
+    "repository": "https://github.com/Latchway/latchway-js.git",
+    "source_commit": "6705a35478c99a7fb70c53e467fec6d0c3141ea0"
+  },
+  "ios": {
+    "pod": "Latchway/AppAttest",
+    "version": "1.0.0",
+    "repository": "https://github.com/Latchway/latchway-ios-sdk.git",
+    "source_commit": "b5104113158fda509e244631eb4939acf45157a3",
+    "minimum_platform": "15.0"
+  },
+  "android": {
+    "group": "dev.latchway",
+    "artifacts": [
+      "latchway-okhttp",
+      "latchway-play-integrity"
+    ],
+    "version": "1.0.0",
+    "repository": "https://github.com/Latchway/latchway-android.git",
+    "source_commit": "1081ac5337ad8ec9eb9ce587bc432bec588cc1c6",
+    "minimum_sdk": 24,
+    "compile_sdk": 37,
+    "sdk_platform_version": "37.0",
+    "build_tools_version": "36.0.0",
+    "ndk_version": "27.1.12297006",
+    "publisher_android_gradle_plugin": "9.3.2",
+    "consumer_android_gradle_plugin": "8.12.0",
+    "kotlin": "2.3.21"
+  }
+}